If you’re tired of fumbling with your UPI PIN every time you split a bill or scan a QR code at a store, ICICI Bank just made life considerably easier. The bank rolled out biometric authentication for UPI payments on its iMobile app on April 28, 2026 — and it’s genuinely worth paying attention to, especially if you handle frequent small transactions through your phone.
Here’s a breakdown of what matters most, starting with the most important points.
- What the Feature Actually Does
Instead of typing a four- to six-digit PIN every time you make a payment, you can now authenticate UPI transactions using your fingerprint or face ID directly on your device. The entire approval happens in seconds, without any visible PIN entry. For anyone who regularly pays at crowded shops, markets, or public spaces, this alone is a significant upgrade.
The feature covers three types of transactions: peer-to-peer money transfers, QR code scans at physical stores, and select online checkouts.
- The Rs.5,000 Limit — Know It Well
This is the single most important restriction to understand. Biometric authentication only works for payments up to Rs.5,000. Anything above that amount automatically requires your UPI PIN, as it always did. High-value transfers, recurring mandates, bill payments, and investments also remain PIN-only.
This limit isn’t arbitrary — it aligns with RBI’s Additional Factor of Authentication (AFA) framework, which allows simplified verification specifically for lower-risk, low-value transactions. So the bank isn’t cutting corners; it’s working within a defined regulatory structure.
- Security Is Stronger Than You Might Think
A common concern with biometric features is data privacy — where does your fingerprint or face data actually go? With this implementation, the answer is: nowhere. All biometric processing happens entirely on your device using its secure enclave. Your biometric data never reaches ICICI’s servers.
There are additional layers worth noting. The system includes liveness detection, which means a photograph or video of your face cannot fool it — 3D face mapping actively blocks spoofing attempts. If the biometric scan fails for any reason, the app automatically falls back to PIN authentication. You’re never locked out, and the bank isn’t gambling on a single security layer.
Additionally, eliminating visible PIN entry in public spaces directly reduces shoulder-surfing — a surprisingly common way people lose access to their accounts.
- Check Your App Version Before You Try Anything
This feature won’t appear unless your app meets the minimum version requirement. Android users need iMobile version 30 or higher for fingerprint support. iOS users need version 28.2 or above for Face ID functionality. Your device also needs to have biometrics already enrolled in its system settings — the feature won’t work on a phone where fingerprint or face recognition hasn’t been set up at the OS level.
If your app is outdated, it will prompt you to update when you log in. Download the latest version directly from the Google Play Store or Apple App Store — not from third-party sources.
- Activation Takes Under Two Minutes
The setup process is straightforward. Open iMobile and log in normally. From the menu, go to UPI Payments, then UPI Settings. Select the bank account you want to enable biometrics for, then choose “Use Biometric for Payments.” You’ll be asked to enter your UPI PIN once — this is a one-time verification step, not something you’ll repeat. After that, complete a biometric scan, and the feature is live.
You can enable it separately for each linked account, which is useful if you want biometric authentication on one account but not another.
- You Stay in Control
Nothing is forced or permanent. You can toggle between biometric and PIN authentication at any time through the same UPI Settings menu. There are no extra charges for using this feature, and it requires no new registration beyond the in-app setup. Users who prefer the traditional PIN flow can continue using it without any disruption.
For ICICI’s 9+ crore customers, this update meaningfully reduces friction on everyday small payments — without weakening the security structure that protects larger transactions.